Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NyYl5alPP1PNrj_hEzCSTwaERXQ.roa
File: NyYl5alPP1PNrj_hEzCSTwaERXQ.roa (raw, json)
Hash identifier: 7yMjW3lCusRlhVBdPdn9LFJwfS5xo+efFmtQ2wwTc+I=
Subject key identifier: 37:26:25:E5:A9:4F:3F:53:CD:AE:3F:E1:13:30:92:4F:06:84:45:74
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 895A4925
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NyYl5alPP1PNrj_hEzCSTwaERXQ.roa
Signing time: Thu 02 Jun 2022 17:10:20 +0000
ROA not before: Thu 02 Jun 2022 17:10:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:181:22f:7a99/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2304395557 (0x895a4925)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 2 17:10:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=372625e5a94f3f53cdae3fe11330924f06844574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:71:1b:99:29:22:a4:4b:98:f5:44:2b:ea:52:
2d:06:9a:b8:37:e8:d2:16:bc:b6:ad:68:25:fa:7a:
8a:31:45:9c:db:d7:22:53:37:2d:4f:ee:9f:31:33:
e5:31:4f:84:50:b7:93:0c:e1:5b:57:fe:9c:8d:29:
57:90:37:c2:92:f5:fe:64:94:e4:86:c9:d0:38:bc:
61:e4:f0:a1:8e:85:7b:25:02:df:aa:41:1c:db:15:
58:99:2f:ad:14:c0:fa:85:4e:ed:f7:a6:72:7b:b3:
b4:e8:57:09:78:45:ec:b3:e7:6c:b2:81:7b:1a:9d:
39:69:6e:d3:4d:ac:78:34:92:ff:9e:68:cf:89:1d:
64:41:cd:6c:e7:58:67:84:90:74:ee:9b:f2:3f:c3:
74:37:7c:7f:70:8a:15:34:c8:67:91:00:af:f5:34:
55:aa:26:d9:11:37:8e:1a:ba:2a:0e:32:79:db:a0:
d6:98:ee:bc:a0:d2:a2:6a:a3:f2:f9:98:53:25:8f:
26:bf:07:a0:66:16:dd:dc:eb:eb:b0:64:09:2c:01:
0e:71:e9:9d:2a:50:f2:42:e1:e9:14:e4:57:9b:87:
d3:30:48:c3:ba:b2:07:a0:b6:c3:39:23:cc:45:04:
5a:6e:59:b0:b3:47:b7:7c:ad:b9:98:3d:72:28:de:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:26:25:E5:A9:4F:3F:53:CD:AE:3F:E1:13:30:92:4F:06:84:45:74
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/NyYl5alPP1PNrj_hEzCSTwaERXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
3f:d9:ae:c0:0e:07:57:f9:80:33:25:ad:ef:c9:83:9d:ca:68:
c8:26:6e:1a:a0:fd:63:b5:5d:93:e8:60:c9:6c:72:3d:94:71:
3f:7d:02:47:39:27:6e:51:02:4a:d1:59:b4:11:9d:48:86:83:
d0:a3:e8:40:b0:58:ee:c2:85:e4:69:7d:5c:73:55:5b:c9:f6:
e1:8b:50:45:1c:ab:21:67:b4:2e:61:ae:6c:ed:f1:a3:84:40:
6c:49:00:9c:71:af:b3:df:74:26:32:49:3a:a3:fa:e1:3d:15:
ae:9d:46:11:01:9e:6e:89:a6:de:fb:89:85:90:a3:a5:66:48:
b8:93:8a:68:48:77:e4:b2:c6:ec:d4:63:a0:5f:73:3f:da:d1:
2d:45:0c:b7:19:fc:b3:53:26:43:32:5d:20:99:97:fb:51:ef:
f2:d1:1d:f3:98:f4:ad:5a:97:d0:82:09:c0:27:cd:a9:42:e8:
d8:15:00:3c:75:2d:b8:94:a6:00:15:0c:8d:ff:ea:be:22:75:
d0:b8:6a:43:87:0e:f0:a3:02:61:ed:76:80:47:a7:f4:62:8f:
7a:ce:4c:75:72:07:1d:2e:6d:d0:86:51:cb:c5:1e:39:a9:91:
92:ca:ac:14:42:bc:ed:cc:c4:09:6d:21:a8:03:02:8c:d3:4b:
99:e4:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:54:48 2025 by rpki-client